NINIPLAYER.EXE – Unclassified Malware removal

NINIPLAYER.EXE size: 545168 bytes
NINIPLAYER.EXE hash: 0BF57295043E91A797F044CB3CA6C73C

Created files:

C:\PPDaQuan\Bupdate.exe
C:\PPDaQuan\Daily.exe
C:\PPDaQuan\pao.ocx
C:\PPDaQuan\PPDQ.exe
C:\PPDaQuan\PPEX.exe
C:\PPDaQuan\PPEXq.exe
C:\PPDaQuan\qvod\Codecs\QvodSource.dll
C:\PPDaQuan\qvod\Codecs\real\cook.dll
C:\PPDaQuan\qvod\Codecs\real\drv2.dll
C:\PPDaQuan\qvod\Codecs\real\drvc.dll
C:\PPDaQuan\qvod\Codecs\real\pncrt.dll
C:\PPDaQuan\qvod\Codecs\real\raac.dll
C:\PPDaQuan\qvod\Codecs\vp8decoder.dll
C:\PPDaQuan\qvod\dxva2.dll
C:\PPDaQuan\qvod\NetAgent.dll
C:\PPDaQuan\qvod\NiniInsert.dll
C:\PPDaQuan\qvod\NiniNet.dll
C:\PPDaQuan\qvod\NiniPlayer.exe
C:\PPDaQuan\qvod\NiniTerminal.exe
C:\PPDaQuan\qvod\QvodPlayMedia.dll
C:\PPDaQuan\un.exe
C:\PPDaQuan\unins000.exe

Detected by UnHackMe:

NINIPLAYER.EXE
Default location: C:\PPDAQUAN\QVOD\NINIPLAYER.EXE

Dropper information:
MD5: 329d348c074793de0dcfe8f19ac5b1a2
File size: 5410935 bytes